"""
Copyright (c) 2022 Huawei Technologies Co.,Ltd.

openGauss is licensed under Mulan PSL v2.
You can use this software according to the terms and conditions of the Mulan PSL v2.
You may obtain a copy of Mulan PSL v2 at:

          http://license.coscl.org.cn/MulanPSL2

THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
See the Mulan PSL v2 for more details.
"""
"""
Case Type   : 防篡改
Case Name   : 连续登录失败锁定策略的“限定的时间段”可配置
Create At   : 2022/3/7
Owner       : @daiguatutu
Description :
    1.设置参数并重启数据库enableSeparationOfDuty=on
    gs_guc set -N all -I all -c enableSeparationOfDuty=on;
    gs_om -t restart
    2.配置参数password_lock_time的值分别为：0,365,-1,366,0.06
    gs_guc reload -N all -I all -c password_lock_time=[参数值]
    3.查看参数password_lock_time的值
    show password_lock_time;
    4.清理环境
    gs_guc reload -N all -I all -c password_lock_time=[默认参数值]
    gs_guc set -N all -I all -c enableSeparationOfDuty=[默认参数值];
    gs_om -t restart
Expect      :
    1.成功
    2.参数值在范围0~365之间的数字设置成功,不符合要求的值设置失败
    3.成功,值为1.44h
    4.清理环境成功
History     :
"""

import os
import re
import unittest

from testcase.utils.Common import Common
from testcase.utils.CommonSH import CommonSH
from testcase.utils.Constant import Constant
from testcase.utils.Logger import Logger


class Security(unittest.TestCase):
    def setUp(self):
        self.log = Logger()
        self.log.info(f'-----{os.path.basename(__file__)} start-----')
        self.pri_sh = CommonSH('PrimaryDbUser')
        self.constant = Constant()
        self.common = Common()
        self.default_value1 = self.common.show_param('enableSeparationOfDuty')
        self.default_value2 = self.common.show_param('password_lock_time')

    def test_security(self):
        text = '-----step1：设置参数并重启数据库enableSeparationOfDuty=on; ' \
               'expect:成功-----'
        self.log.info(text)
        mod_msg = self.pri_sh.execute_gsguc('set',
                                            self.constant.GSGUC_SUCCESS_MSG,
                                            'enableSeparationOfDuty=on')
        self.assertTrue(mod_msg, '执行失败:' + text)
        result = self.pri_sh.restart_db_cluster()
        self.assertTrue(result, '执行失败' + text)

        text = '-----step2：配置参数password_lock_time的值分别为：0,365,-1,366,0.06; ' \
               'expect:参数值在范围0~365之间的数字设置成功,不符合要求的值设置失败-----'
        self.log.info(text)
        values = [0, 365, -1, 366, 0.06]
        for value in values:
            res = self.pri_sh.execute_gsguc('reload', '',
                                            f'password_lock_time={value}',
                                            get_detail=True)
            if value in [-1, 366]:
                assert_msg = r'The value (.*)is outside the valid range ' \
                             r'for parameter'
                self.assertIsNotNone(re.search(assert_msg, res),
                                     '执行失败:' + text)
            else:
                self.assertIn(self.constant.GSGUC_SUCCESS_MSG, res,
                              '执行失败:' + text)

        text = '-----step3：查看参数password_lock_time; expect:成功,值为1.44h-----'
        self.log.info(text)
        value1 = self.common.show_param('password_lock_time')
        self.assertEqual('1.44h', value1, '执行失败:' + text)

    def tearDown(self):
        self.log.info('-----step4：清理环境-----')
        text = '-----恢复参数password_lock_time; expect:成功-----'
        self.log.info(text)
        mod_msg = self.pri_sh.execute_gsguc('reload',
                                            self.constant.GSGUC_SUCCESS_MSG,
                                            f'password_lock_time='
                                            f'{self.default_value2}')

        text2 = '-----恢复参数enableSeparationOfDuty并重启数据库 expect:成功-----'
        self.log.info(text2)
        mod_msg1 = self.pri_sh.execute_gsguc('set',
                                             self.constant.GSGUC_SUCCESS_MSG,
                                             f'enableSeparationOfDuty='
                                             f'{self.default_value1}')
        restart_res = self.pri_sh.restart_db_cluster()

        self.log.info('-----断言tearDown执行成功-----')
        self.assertTrue(mod_msg, '执行失败:' + text2)
        self.assertTrue(mod_msg1, '执行失败:' + text2)
        self.assertTrue(restart_res, '执行失败:' + text2)
        self.log.info(f'-----{os.path.basename(__file__)} end-----')
